Universal SSL doesn't issue any certificates for my domain

[flower-elf]

What is the name of the domain?

glaorg.top

What is the error number?

No error number

What is the error message?

SSL_ERROR_NO_CYPHER_OVERLAP

What is the issue you’re encountering

Universal SSL doesn’t issue any certificates for my domain

What steps have you taken to resolve the issue?

(Sorry I don’t speak English, so the following was written using a translation program.)
I’ve been using this domain for a long time and previously had no problems with it.Until 2024-11-08.

I don’t have multiple levels of sub-domains
This domain is added by my partner via CNAME method to Cloudflare.
Problem:
Universal SSL doesn’t issue any certificates for my domain now.
And the existing certificates have disappeared from the list, which has resulted in my site being completely offline and inaccessible at the moment (because of HSTS)

I have tried various documentation and community solutions(include Enable/Disable Universal SSL) but none of them worked.
Then I contacted my partners, who told me that no issues were found and that DNS resolution was fine.

In the screenshot below I listed my dns records (Cloudflare side)
What I can ascertain is that my authoritative dns provider (Huawei Cloud) isn’t have any problem and the domain is back to normal immediately after stop pointing to cloudflare.

Add: I’ve followed the instructions to complete the DCV setup, but still no certificates.
This domain doesn’t use DNSSEC.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full (strict)

What are the steps to reproduce the issue?

None.
I hope this can be resolved soon, the domain has been down for a week because of this.

Screenshot of the error

[flower-elf]

Update:
Now I have a new problem.
It says “SSL has been disabled for this zone”

[ncormier]

Sorry you are dealing with this, would you be able to toggle it back on, so I can check some things further on my end?

[flower-elf]

Thanks for the reply.
But now I can’t reopen the Universal SSL
It says “SSL has been disabled for this zone”.

I’ve turned on edit permissions on my account, can you help me out?

[flower-elf]

Update:
I tried to enable it again, and now it enabled.
But still no certificate has been issued

[flower-elf]

Hello
I tried to view the certificate packs using the api, but it gives me the error
“There are no certificate packs eligible for verification on this zone”.

Also, I’ve created a ticket in the support portal
The ticket number is: #01264654
Sincerely hope this issue can be resolved

[harshinik]

Hello,

Since there is a ticket created, we will follow up this issue in the ticket

Thank you